Question
DKIM TXT DNS record mail._domainkey exists but verifier.port25.com says it doesn't
I followed the excellent article: https://www.digitalocean.com/community/tutorials/how-to-install-and-configure-dkim-with-postfix-on-debian-wheezy to set up DKIM on my server. I created the two TXT records exactly as required. My domain is called realassurance.com. However the authentication check using a test email to: check-auth@verifier.port25.com returns the following in the DKIM section stating that mail._domainkey.realassurance.com doesn’t exist (see below), when it does. Having read as many blog articles as I could find about this I have ensured the text is in quotes and I am sure it is not a propagation issue as I used mxtoolbox.com (and other similar online tools) to check for mail._domainkey.realassurance.com which was found as a TXT record ok.
Also I note in the report below, it reports the DNS record as TXT (NXDOMAIN) - whatever that means.
No idea what to do next. Can someone please help?
Dave
DKIM check details:
Result: permerror (key “mail._domainkey.realassurance.com” doesn’t exist) ID(s) verified: Canonicalized Headers: to:check-auth@verifier.port25.com’0D’‘0A’ from:John’20’jdt2@realassurance.com’0D’‘0A’ subject:test’0D’‘0A’ date:Sun,‘20’23’20’Apr’20’2017’20’15:53:34’20’+0800’0D’‘0A’ dkim-signature:v=1;'20’a=rsa-sha256;'20’c=relaxed/simple;'20’d=realassurance.com;'20’s=mail;'20’t=1492934013;'20’bh=frcCV1k9oG9oKj3dpUqdJg1PxRT2RSN/XKdLCPjaYaY=;'20’h=To:From:Subject:Date:From;'20’b=
Canonicalized Body: ‘0D’‘0A’
DNS record(s): mail._domainkey.realassurance.com. TXT (NXDOMAIN)
NOTE: DKIM checking has been performed based on the latest DKIM specs (RFC 4871 or draft-ietf-dkim-base-10) and verification may fail for older versions. If you are using Port25’s PowerMTA, you need to use version 3.2r11 or later to get a compatible version of DKIM.
This textbox defaults to using Markdown to format your answer.
You can type !ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!
These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.
Hello there,
You can use a DKIM checker tool like the one provided from mxtoolbox and check whether the generated key is valid.
https://mxtoolbox.com/dkim.aspx
I’ll also highly recommend not to send emails via port 25 as this is insecure and a lot of email providers will discard any emails coming from it. You can also use an email provider like Sendgrid to send your emails.
Hope that this helps! Regards, Alex
@dave102
When using MXToolbox, I was able to verify the DKIM entry easily. I’m seeing the following:
It is possible that at the time of checking, the DNS entry hadn’t fully propagated, thus when they did a check, it failed. On my end, as of this reply, it’s showing up and appears valid.